]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/core/load-fragment.h
bpf-firewall: custom BPF programs through IP(Ingress|Egress)FilterPath=
authorKai Lüke <kailueke@riseup.net>
Tue, 23 Apr 2019 10:14:20 +0000 (12:14 +0200)
committerLennart Poettering <lennart@poettering.net>
Tue, 25 Jun 2019 07:56:16 +0000 (09:56 +0200)
commitfab347489fcfafbc8367c86afc637ce1b81ae59e
tree25eb895a90940163ff7e6f0e3d8c0054433ae6d1
parent2d901d33a90ef9d3fe01ac66c4894c9e6bf48ce0
bpf-firewall: custom BPF programs through IP(Ingress|Egress)FilterPath=

Takes a single /sys/fs/bpf/pinned_prog string as argument, but may be
specified multiple times. An empty assignment resets all previous filters.

Closes https://github.com/systemd/systemd/issues/10227
16 files changed:
man/systemd.resource-control.xml
src/analyze/analyze-security.c
src/core/bpf-firewall.c
src/core/bpf-firewall.h
src/core/cgroup.c
src/core/cgroup.h
src/core/dbus-cgroup.c
src/core/load-fragment-gperf.gperf.m4
src/core/load-fragment.c
src/core/load-fragment.h
src/core/unit.c
src/core/unit.h
src/shared/bpf-program.c
src/shared/bpf-program.h
src/shared/bus-unit-util.c
src/test/test-bpf.c